Legal information
Privacy Policy
Last updated: July 15, 2026
2.1 Controller
SPHEREMEDIA.AI LTD, Reg. No. HE 495384, Aiolou & Panagioti Diomidou 9, Katholiki, 3020 Limassol, Cyprus is the data controller for bullai.ai. Lead supervisory authority: Office of the Commissioner for Personal Data Protection, Cyprus. Contact: support@bullai.ai.
2.2 Data we collect
We collect account and contact data, including name, email, phone, country and language; verification status for email and SMS; usage and device data, including pages, features, IP and device; subscription and payment metadata, while full card data stays with our payment processor; marketing data, including consents, messages sent and engagement; and community content you post.
2.3 Purposes and legal bases (GDPR Art. 6)
Operating the Service and your subscription is based on contract. Our own marketing by email, SMS or push is based on consent and can be withdrawn at any time. Sharing your contact details with a specific named broker is based on explicit consent per broker and can be withdrawn at any time. Community moderation, security, fraud prevention and product analytics are based on legitimate interests. Tax, accounting and legal duties are based on legal obligation.
2.4 Sharing leads with broker partners
We transfer your name, email and phone number to a partner broker only after you tick a consent box naming that broker. From transfer, the broker is an independent data controller under its own privacy policy; our contracts prohibit it from reselling or sharing your data onward. We are compensated for these referrals - see the Affiliate & Broker Partnership Disclosure.
2.5 Processors and transfers
We use hosting, analytics, email/SMS and payment providers as processors under GDPR Art. 28 agreements. Transfers outside the EU/EEA rely on adequacy decisions or the 2021 Standard Contractual Clauses.
2.6 Retention
Anonymized financial and audit records may remain. Payment providers retain records required by their legal obligations. Deletion-request contact details are removed within 90 days of completion or cancellation. Backup copies expire under the backup policy and must not restore deleted accounts.
2.7 Your rights
EU/EEA users under GDPR and UK users under UK GDPR have rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent and complaint to their supervisory authority. Direct-marketing objections are always honoured. Cyprus users may contact dataprotection.gov.cy and UK users may contact the ICO. Users elsewhere may exercise applicable local rights by contacting support@bullai.ai.
2.8 Children
The Service is for users aged 18 and over. We do not knowingly process data of minors and delete it on discovery.
Cookie Policy
Essential cookies for login, security, language and consent storage remain available. Optional analytics, advertising and affiliate cookies are enabled only after you accept them in the banner. We remember your choice in this browser for 180 days. You can change it at any time using Cookie settings in the footer, on this page or in Settings. Rejecting optional cookies stops optional tracking and removes accessible optional first-party cookies.